Version from cargo and released bin is unsecure!

[markus-geiger]

http://x.x.x.x/%2F is possible! No problem to retrieve ro-files from /etc.

Also would be nyce to see a https-only and an autogenration for self-signed certs.

[notthetup]

Indeed! The only latest version published to crates.io seems to be 0.4.7 https://crates.io/crates/simple-http-server

Similarly with releases section of Github. https://github.com/TheWaWaR/simple-http-server/releases

And 0.4.7 doesn't fix #13

[blurayne]

Version from master states 0.6 and does solve the problem (also when you start with cert it's https).

But this insecurity should be flagged and cargo releases should be updated.

[TheWaWaR]

0.6.0 published. Please update simple-http-server though:

cargo install simple-http-server --force

I only have Linux machine, will upload the binary in release page later.